News and Analysis

Adobe’s ColdFusion application development tool contains a security flaw that continues to be exploited, despite being patched in March. This week, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) revealed two public-facing federal government servers were breached by one or two groups during the summer. The hackers planted malware and viewed data, exploiting the vulnerability in the ColdFusion software.